CVE-2024-40489

The vulnerability consists of overly liberal filtering of special characters in input data transmitted via HTTP. The attacker sends a specially crafted HTTP request containing a malicious payload that is not properly sanitized by the application. As a result, the payload reaches the code execution component, resulting in execution of arbitrary instructions on the server side (RCE).

An attacker can remotely and without authentication execute arbitrary code on the server with application privileges, which may lead to complete system compromise, data breach, and violation of service integrity and availability.

Apply patches available from the vendor according to the references. Immediate update of Jeecg Boot to a version higher than 3.5.3 is recommended. Until the patch is implemented, it is recommended to restrict application access exclusively to trusted networks or IP addresses and monitor logs for suspicious HTTP requests.

Jeecg Boot in versions 3.0.0 to 3.5.3